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(54) Embedded microcontroller bound-out chip as preprocessor for a logic analyser 



(57) The invention is concerned with providing ac- 
cess to all those internal signals of an embedded micro- 
controller that are necessary to debug software run on 
the microcontroller. I nan embedded microcontroller, on- 
ly some of these signals are directly accessible on the 
pins of the microcontroller. According to the invention, 



the missing set of internal signals are provided with the 
aid of a bond-out chip functionally identical with the em- 
bedded microcontroller and connected in parallel here- 
with. The signals from the embedded microcontroller 
and from the bond-out chip are provided to a logic ana- 
lyser. 
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Description 
TECHNICAL FIELD 

[0001 ] The present invention relates to products com- 
prising embedded microcontrollers (\iC) and more par- 
ticularly to debugging of the software while this is run- 
ning real-time on a target embedded u,C. 

BACKGROUND OF THE INVENTION 

[0002] When designing products incorporating one or 
more embedded u.C's, it is important to be able to debug 
the software executed by these u.C's while such soft- 
ware is running real-time on the target u.C's. This can in 
general be achieved by using a modern logic analyser 
(LA) to perform inverse assembly (IA) of the code exe- 
cuted on the particular uC. By inverse assembly is 
meant a function which can be performed by modem 
logic analysers, provided the logic analyser has access 
to all signal activity on the address bus, the data bus, 
the bus control signals and the microprocessor status 
signals. The logic analyser also is provided with a copy 
of the software executed by the microprocessor and of 
the symbol table. By combining these data, the logic an- 
alyser can visualise how the software was executed and 
carry out source code correlation in the same manner 
as an interactive debugger. The process is, however, not 
interactive, i.e. the program flow can only be inspected, 
not altered. 

[0003] In most cases where embedded jiC's are not 
used, the inverse assembly carried out by the logic an- 
alyser works on the control- and status signals of the 
microprocessor (u.P) core. This is a straightforward ap- 
proach in the case of a general purpose u,P (e.g. for use 
in workstations), where the uP has all status and control 
signals from the core directly accessible on the pins of 
the uP chip, 

[0004] On a uC designed for the embedded market, 
the uP core and most of its control signals are concealed 
on-chip and only visible through an external bus inter- 
face (EBI). Only a sub-set of the address- and data sig- 
nals are accessible off-chip, and all of the uP control- 
and status signals are used to generate a few off-chip 
control signals, or simply ignored. The off-chip control 
signals either have the wrong format with respect to the 
inverse assembly or do not provide enough status infor- 
mation from the core of the u.P to allow the inverse as- 
sembly to work correct. The problem is particularly se- 
rious if the EBI contains data or program cache (or both). 
The native control and status signals are concealed on- 
chip in order to save pins on the package of the embed- 
ded u.C, thereby saving both area and costs. 
[0005] The manufactures of embedded u.C's are ad- 
dressing this problem by offering so called "bond-out" 
versions of the chips, which may have many more pins 
in orderto allow all internal busses and control- and sta- 
tus signals to be routed to an external pin. The bond out 
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chip behaves exactly like the embedded uC chip and 
makes the internal signals observable by the LA/I A at 
the same time. 

[0006] Bond-out chips are often used in emulators. 

s Emulators usually contain a number of auxiliary logiccir- 
cuits, buffers, housekeeping microprocessors, memory, 
host interfaces etc. The buffers and other auxiliary logic 
circuits imply that the emulator can not run at the full 
speed of the embedded u.C chip. Emulators are gener- 

10 ally expensive, sophisticated pieces of equipment that 
often require a lot of configuration in order to work cor- 
rect with the target application. The major drawback of 
an emulator is, however, that the uC chip on the target 
has to be removed and replaced by the emulator pod. 

is This is a serious problem with fine pitch SMD uC's. 

SUMMARY OF THE INVENTION 

[0007] According to the preceding description of the 
20 problems of debugging software while this is running re- 
al-time on a target embedded microcontroller, it is an 
object of the present invention to provide a device with 
the aid of which all internal signals relevant for said de- 
bugging of software can be made observable. 
25 [0008] It is a further object of the present invention to 
provide a device which can be used as a pre-processor 
for a logic analyser in that it generates the missing in- 
ternal signals from the microcontroller which are needed 
to carry out said debugging with the aid of the logic an- 
30 alyser. 

[0009] As a consequence of the disadvantages asso- 
ciated with the use of an emulator to simulate the be- 
haviour of the microprocessor core in the embedded mi- 
crocontroller, it is a further object of the present inven- 
ts tion to provide full observability to the internal signals of 
the microprocessor core without using an emulator. 
[0010] According to the invention, these objects are 
attained by using a bond-out chip to generate said miss- 
ing internal signals. According to the invention, the 
to bond-out chip is connected in parallel to all pins of the 
target embedded microcontroller. In this manner the 
bond-out chip receives exactly the same input signals 
as the target embedded microcontroller and hence be- 
haves in exactly the same way. Thus, the bond-out chip 
is can for instance be used as a pre-processor for a logic 
analyser providing those internal signals from the em- 
bedded microcontroller which are not directly accessi- 
ble/observable from outside. In this way the logic ana- 
lyser is not looking at the target microprocessor itself, 
so but at a 1 00% correct mirror hereof. The subset of sig- 
nals from the target embedded microcontroller that are 
accessible from outside are thus provided to the logic 
analyser, and an exact replica of those signals not 
present from outside the target microcontroller is pro- 
55 vided by the bond-out chip. 

[001 1 ] In this manner the disadvantages of using an 
emulator in the debugging process as set forth in the 
introduction are overcome. It is specifically advanta- 
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geous that the target microcontroller need not to be re- 
moved during debugging (in fact the target microcon- 
troller must necessarily be present in order to deliver 
said subset of signals that are accessible from the target 
microcontroller). Furthermore, a pre-processor accord- 
ing to the invention is much less complex than a usual 
emulator and hence much cheaper, and no set-up of the 
pre-processor is required as opposed to the emulator. 
[0012] It is a further major advantage with the pre- 
processor according to the invention that it is the target 
microcontroller itself that is controlling the target circuit 
board and not an emulator or the pre-processor. 
[001 3] It is a further advantage with the pre-processor 
according to the invention that although there will be a 
speed penalty due to the time constant resulting from 
parasitic capacitance's and protection resistors which 
will necessarily be present in a practical embodiment of 
the invention, the pre-processor will nevertheless in 
general be able to run at a higher speed than the emu- 
lator. 

[0014] Furthermore, it is an advantage that the pre- 
processor according to the invention can - and normally 
will - be powered from the target microcontroller. In cas- 
es where an emulator is used instead of the pre-proc- 
essor according to the invention, both target and emu- 
lator must be turned off (i.e. not powered) when the em- 
ulator is connected and disconnected to/from the target. 
During the power-up phase, it is very important to power 
up the target and the emulator in the right sequence. 
Specifically the emulator should always be powered up 
before the target or vice versa. The right sequence de- 
pends on the emulator. If the target and the emulator 
are powered up in the wrong sequence, permanent 
damage may occur to the target or the emulator or both. 
This problem is entirely eliminated with the pre-proces- 
sor according to the invention. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0015] The invention will now be described in more 
detail with reference to the accompanying drawings, in 
which 

figure 1 is a microprocessor u.P with observable sig- 
nals connected to a logic analyser; 

figure 2 is an embedded microcontroller u,C with 
concealed signals; 

figure 3 is a bond-out chip connected to a logic an- 
alyser; and 

figure 4 is an embedded u.C connected to a bond- 
out chip functioning as a pre-processor for a logic 
analyser according to the present invention. 



DETAILED DESCRIPTION OF THE INVENTION 

[0016] In the following a detailed description of one 
embodiment of the invention is given. Specifically this 
s embodiment is shown in figure 4, whereas figures 1 
through 3 are related to prior art, as already briefly de- 
scribed in the introduction. 

[0017] With reference to figure 1, there is shown a mi- 
croprocessor u,P designated by 1 running software to be 

10 debugged. The microprocessor 1 is provided with ac- 
cess terminals for status-, address-, data- and control 
signals respectively, and all of these signals are acces- 
sible for a logic analyser 6 via appropriate signal paths 
2, 3, 4 and 5. All signals from the microprocessor 1 are 

'5 thus observable from outside, and it is thus possible us- 
ing the logic analyser 6 to trace the execution of the soft- 
ware completely. 

[001 8] An entirely different situation is depicted in fig- 
ure 2 showing an embedded microcontroller u.C 7 com- 

20 prising a microprocessor core 8 running the software to 
be debugged. In this case some of the signals needed 
for a logic analyser to trace the software execution are 
made observable via an external bus interface EBI 13 
provided in the embedded microcontroller, but only a 

25 sub-set of the address- and data signals 10, 11 are ob- 
servable off -chip, and all of the control- and status sig- 
nals 12, 9 from the microprocessor are used to generate 
a few off-chip control signals, or simply ignored. The log- 
ic analyser 6 thus suffers from a lack of information nec- 

30 essary to be able to trace software execution in the mi- 
croprocessor core 8. 

[0019] A prior art solution to this problem is presented 
in figure 3 where the microprocessor core 1 4 of the em- 
bedded microcontroller 7 is a bond-out chip thus provid- 

35 ing external access/observability to all relevant signals 
in the microprocessor core 14. The bond-out chip com- 
prises pins making the status signals of the microproc- 
essor core indirectly observable, as indicated by 2 in the 
figure and similarly pins providing observability to con- 

40 trol signals 3, data signals 4 and address signals 5 of 
the microprocessor core 14. 

[0020] Thus, the logic analyser 6 is in this case pro- 
vided with all necessary information to be able to per- 
form inverse assembly. 

45 [0021] Referring now to figure 4, there is shown a 
bond-out chip functioning as a pre-processor for a logic 
analyser according to the present invention. The figure 
shows the bond-out chip 15 connected in parallel with 
the target embedded microcontroller 7. Specifically the 

50 I/O ports of the target and the pre-processor are con- 
nected via bus 1 6, and the external bus interfaces (EBI) 
1 3 of the pre-processor 1 5 and the target 7 respectively 
are interconnected by means of busses 17, 18 and 19 
carrying address-, data- and control signals respective- 

55 |y. Internal status-, control-, data- and address signals 
are furthermore provided by the bond-out chip 1 5 to the 
logic analyser 5 via busses 2, 3, 4 and 5 respectively. 
The pre-processor 1 5 is connected to all pins of the tar- 
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get microcontroller 7 for instance by means of a Snap- 
On probe clip attached to the target microcontroller or 
via dedicated board-to-board connectors surrounding 
the target microcontroller. The logic analyser is provided 
with signals from the target microcontroller 7 and with 
additional control- and status signals from the bond-out 
chip 15. It is advantageous - although not always nec- 
essary - that the RESET signals of the embedded mi- 
crocontroller 7 and of the bond-out chip 15 be synchro- 
nised to the system clock signal in order to guarantee 
that the target chip and the bond-out chip recognises 
desertion of reset in the same clock cycle. When the mi- 
crocontroller is configuring itself after reset, this is done 
in exactly the same way on both the target microcontrol- 
ler 7 and the pre-processor 1 5 including the functionality 
and polarity of I/O pins. If this feature is not present, the 
pre-processor 15 will normally function anyway, but this 
can not generally be guaranteed. 
[0022] On the pre-processor 1 5, those signals which 
are input-only on the target microcontroller 7 are con- 
nected directly to the bond-out chip. Signals which are 
bi-directional - or which can be programmed to be either 
input or output on the target microcontroller 7 - are con- 
nected to target through suitable protection resistors 
(not shown), e.g. 330 ohms resistors. In this way they 
still work as inputs bot will not be able to cause conten- 
tion when they are working as outputs. This is important, 
as the target chip and the bond-out chip may have dif- 
ferent timing due to different batches, temperature, age- 
ing etc. 

[0023] The value of the protection resistors must be 
chosen large enough to ensure that the maximum out- 
put current of the respective microcontroller pin (Imax) 
can not be exceeded. Specifically it is required that R>= 
Vcc/lmax, where Vcc is the supply voltage. 
[0024] Furthermore, if the target microcontroller con- 
tains non-volatile memory, it must be assumed that the 
non-volatile memories of the target microcontroller 7 
and the pre-processor bond-out chip 1 5 are identical be- 
fore the pre-processor 1 5 is connected to the target mi- 
crocontroller 7. If the non-volatile memory of the target 
microprocessor 7 can be in-circuit programmed, the tar- 
get microcontroller 7 can be programmed with the pre- 
processor 1 5 fitted. The programming will affect the pre- 
processor 1 5 as well, and the problem is solved (subject 
to programming algorithm). 

[0025] In the embodiment shown in figure 4, the bond- 
out chip 15 receives its power supply 20 directly from 
the power supply Vcc of the embedded microcontroller 
7, as previously mentioned. 



A method for debugging software run on an embed- 
ded microcontroller (7), a first subset of the internal 
signals of which are accessible from outside and the 
remaining internal signals of which are not accessi- 



ble from outside, said method comprising: 

Establishing the necessary external connec- 
tions to/from the embedded microcontroller (7) 
to enable this to execute the software run by 
the microcontroller in a desired manner; 

Connecting a second microcontroller (15), a 
second subset of the internal signals of which 
are accessible from outside, in parallel with 
said embedded microcontroller (7); 

Providing said first subset of internal signals 
from the embedded microcontroller (7) that are 
accessible from outside and which are neces- 
sary for said debugging to a logic analyser (6); 

Providing the remaining internal signals which 
are required for software debugging from said 
second microcontroller (15) to said logic ana- 
lyser (6); 

where said second microcontroller (15) is function- 
ally identical with said embedded microcontroller 
(7). 

A method according to claim 1, where the RESET 
signals of the embedded microcontroller (7) and of 
said second microcontroller (15) are synchronised 
with the aid of the system CLOCK signal. 

A method according to claim 1 , where said second 
subset of internal signals comprise all internal sig- 
nals from the second microcontroller (15). 

A method according to claim 1 , where said second 
subset of internal signals comprise control-, data-, 
address- and status signals (4, 5, 6, 9) from said 
microcontrollers (7, 15). 

A system for debugging software run on an embed- 
ded microcontroller (7), some of the internal signals 
of which are accessible from outside and some of 
which are not accessible from outside, said system 
comprising: 

A bond-out chip (15) functionally identical to 
said embedded microcontroller (7), where all 
internal signals (2, 3, 4, 5) are accessible from 
outside; 

A logic analyser (6) receiving all internal signals 
necessary for said debugging; 

Where said bond-out chip (15) is connected in par- 
allel with said embedded microcontroller (7), and 
where a first subset of internal signals necessary 
for said debugging is provided to said logic analyser 
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(6) from said microcontroller (7), and the remaining 
internal signals necessary for said debugging is 
provided to said logic analyser (6) from said bond- 
out chip (15). 

5 

6. A system according to claim 5, where those signals 
that are only input signals to said embedded micro- 
controller are connected to the corresponding input 
terminals on said bond-out chip directly, whereas 
those signals which are bi-directional, or which can <o 
be programmed to be either input or output signals 
to/from said embedded microcontroller (7) are con- 
nected to the microcontroller (7) through protection 
resistors. 

is 

7. A system according to claim 6, where said protec- 
tion resistors are chosen according to the equation 
R>= Vcc/lmax, where Vcc is the supply voltage and 
Imax is the maximum allowable current for the spe- 
cific terminal of the microcontroller. 20 

8. A system according to claim 6, where said protec- 
tion resistors are in the order of 330 ohms. 

9. A system according to any of the preceding claims 25 
5 to 8, where said bond-out chip (15) receives its 
power supply (20) directly from the power supply of 
said embedded microcontroller (7). 

10. A device for providing observability of all internal 30 
signals from an embedded microcontroller (7), said 
device comprising a bond-out chip (15) functionally 
identical with said embedded microcontroller (7). 
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Fig. 1 
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Fig. 2 
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